Chapter 7 Conguration and management 64
Prole Manager
In addition to third-party MDM solutions, Apple oers an MDM solution called Prole Manager,
a service of OS X Server. Prole Manager makes it easy to congure Apple devices so they’re set
up to your organization’s specications.
Prole Manager provides three components:
•
Over-the-air conguration of Apple devices: Streamline the conguration of institutionally-
owned Apple devices. Enroll devices in MDM during activation and skip basic setup steps to
get users up and running quickly.
•
Mobile device management service: Prole Manager provides an MDM service that lets you
remotely manage enrolled Apple devices. After a device is enrolled, you can update its
conguration over the network without user interaction and perform other tasks.
•
App and book distribution: Prole Manager can distribute apps and books purchased through
the Volume Purchase Program (VPP). App and book assignment is supported on iOS devices
with iOS 7 or later installed and Mac computers with OS X Mavericks or later installed.
For more information, see Managing Devices. Also see Prole Manager Help.
Supervise devices
To enable additional conguration options and restrictions, you should supervise iOS devices
owned by your organization. For example, supervision lets you keep account settings from being
modied, or lets you lter web connections via Global Proxy to make sure users’ web trac stays
within the organization’s network.
By default, all iOS devices are non-supervised. You can combine supervision and remote
management with MDM to manage additional settings and restrictions. To enable supervision of
your organization’s devices, use Apple’s Device Enrollment Program or Apple Congurator.
Supervision provides a higher level of device management for devices that are owned by your
organization, allowing restrictions such as turning o iMessage or Game Center. It also provides
additional device congurations and features, such as web content ltering, and the ability to
silently install apps. With the Device Enrollment Program, supervision can be wirelessly enabled
on the device as part of the setup process, or enabled manually using Apple Congurator.
For more information, see Supervised settings.
Device Enrollment Program
The Device Enrollment Program (DEP) provides a fast, streamlined way to deploy Apple devices
that your organization has purchased directly from Apple or participating Apple Authorized
Resellers or carriers. You can automatically enroll the Apple devices in MDM without having to
physically touch or prepare them before users get them. And you can further simplify the setup
process for users by removing specic steps in Setup Assistant, so users are up and running
quickly. You can also control whether or not the user can remove the MDM prole from the
device. For example, you can order the devices from Apple or a participating Apple Authorized
Reseller or carrier, congure all the management settings, and have the Apple devices shipped
directly to the user’s home address. Once the device is unboxed and activated, it enrolls in your
MDM and all management settings, apps, and books are ready for the user.
100% resize factor
